#cve - digitalcourage.social

Recent searches

Search options

Only available when logged in.

22 posts13 participants2 posts today

Pyrzout @jos1264@social.skynetcloud.site

Cisco AnyConnect VPN Flaw Allows Attackers to Launch DoS Attacks https://gbhackers.com/cisco-anyconnect-vpn-flaw/ #CVE/vulnerability #CyberSecurityNews #Vulnerability #DosAttack #Cisco #vpn

GBHackers Security | #1 Globally Trusted Cyber Security News Platform · 1hCisco AnyConnect VPN Flaw Allows Attackers to Launch DoS AttacksA newly disclosed vulnerability in Cisco’s AnyConnect VPN implementation for Meraki MX and Z Series devices enables denial-of-service (DoS) conditions.

Pyrzout @jos1264@social.skynetcloud.site

Apache Traffic Server Vulnerability Allows DoS Attacks Through Memory Exhaustion https://gbhackers.com/apache-traffic-server-vulnerability/ #CVE/vulnerability #CyberSecurityNews #Vulnerability #cybersecurity #DosAttack

GBHackers Security | #1 Globally Trusted Cyber Security News Platform · 3hApache Traffic Server Vulnerability Allows DoS Attacks Through Memory ExhaustionCVE-2025-49763, affects multiple versions of ATS and has prompted urgent mitigation guidance from the Apache Software Foundation.

G◍M◍◍T @gomoot@mastodon.uno

Vulnerabilità PAM e udisks portano a root completo sulle distro Linux

https://gomoot.com/vulnerabilita-pam-e-udisks-portano-a-root-completo-sulle-distro-linux/

Gomoot : tecnologia e lifestyle Scopri le ultime novità in fatto di hardware, tecnologia IA e altro · 19hVulnerabilità PAM e udisks portano a root sulle distro LinuxUna catena di exploit permette l'accesso root con gli strumenti PAM e udisks: un utente remoto può ingannare il sistema e ottenere controllo completo su Linux.

#blog #cve #debian

Pyrzout @jos1264@social.skynetcloud.site

Critical Privilege Escalation Flaws Grant Full Root Access on Multiple Linux Distros https://gbhackers.com/critical-privilege-escalation-flaws/ #CVE/vulnerability #CyberSecurityNews #Vulnerability #cybersecurity #Linux

GBHackers Security | #1 Globally Trusted Cyber Security News Platform · 1dCritical Privilege Escalation Flaws Grant Full Root Access on Multiple Linux DistrosResearchers has uncovered two interconnected local privilege escalation (LPE) vulnerabilities—CVE-2025-6018 and CVE-2025-6019

Pyrzout @jos1264@social.skynetcloud.site

ASUS Armoury Crate Vulnerability Lets Hackers Gain System-Level Access on Windows https://gbhackers.com/asus-armoury-crate-vulnerability/ #CVE/vulnerability #CyberSecurityNews #Vulnerability #cybersecurity

Pyrzout @jos1264@social.skynetcloud.site

Critical sslh Vulnerabilities Allow Remote Denial-of-Service Attacks https://gbhackers.com/critical-sslh-vulnerabilities/ #CVE/vulnerability #CyberSecurityNews #Vulnerability #cybersecurity #DosAttack

GBHackers Security | #1 Globally Trusted Cyber Security News Platform · 1dCritical sslh Vulnerabilities Allow Remote Denial-of-Service AttacksCVE-2025-46807 and CVE-2025-46806, could allow remote attackers to crash sslh or render it unavailable, resulting in a denial-of-service (DoS) for legitimate users.

Matthias Deeg @deeg@mastodon.social

Today, my colleague Moritz Abrell published 8 security advisories and a corresponding blog article concerning the COROS PACE 3 sport watch.

https://blog.syss.com/posts/bluetooth-analysis-coros-pace-3/

SySS Tech Blog · 2dWatch Out! Bluetooth Analysis of the COROS PACE 3In this blog post, we describe the Bluetooth analysis of the COROS PACE 3 sports watch and the security vulnerabilities we found during this research.

#cybersecurity #infosec #cve

Pyrzout @jos1264@social.skynetcloud.site

Hackers Exploiting Chrome Zero‑Day Vulnerability in the Wild https://gbhackers.com/hackers-exploiting-chrome-zero%E2%80%91day-vulnerability/ #CVE/vulnerability #CyberSecurityNews #Vulnerability #cybersecurity #ZeroDay #Chrome

GBHackers Security | #1 Globally Trusted Cyber Security News Platform · 2dHackers Exploiting Chrome Zero‑Day Vulnerability in the WildCVE-2025-2783 is a high-severity vulnerability in Google Chrome’s Mojo component on Windows systems. Mojo is a runtime library for IPC.

Pyrzout @jos1264@social.skynetcloud.site

CISA Alerts: iOS Zero‑Click Flaw Actively Exploited https://gbhackers.com/cisa-alerts-ios-zero%E2%80%91click-flaw/ #CVE/vulnerability #CyberSecurityNews #Vulnerability #cybersecurity #Apple #iOS

GBHackers Security | #1 Globally Trusted Cyber Security News Platform · 2dCISA Alerts: iOS Zero Click Flaw Actively ExploitedThe vulnerability stemmed from a logic issue in Apple’s Messages app, specifically when processing maliciously crafted photos or videos shared via iCloud Links.

Pyrzout @jos1264@social.skynetcloud.site

Apache Tomcat Flaws Allow Auth Bypass and DoS Attacks https://gbhackers.com/apache-tomcat-flaws/ #CVE/vulnerability #CyberSecurityNews #Vulnerability #DosAttack

GBHackers Security | #1 Globally Trusted Cyber Security News Platform · 2dApache Tomcat Flaws Allow Auth Bypass and DoS Attacks These flaws, affecting Tomcat versions 9.0, 10.1, and 11.0, expose systems to denial-of-service (DoS) attacks, privilege escalation, installer abuse, and authentication bypass.

r1cksec @r1cksec@infosec.exchange

The attack used a .url file that exploited a zero-day vulnerability (CVE-2025-33053) to execute malware from an actor-controlled WebDAV server

https://research.checkpoint.com/2025/stealth-falcon-zero-day

Check Point Research · Jun 10Stealth Falcon's Exploit of Microsoft Zero Day Vulnerability - Check Point ResearchCheck Point Research uncovers Stealth Falcon's cyber espionage campaign exploiting a Microsoft Zero Day Vulnerability

#infosec #cybersecurity #redteam

Pyrzout @jos1264@social.skynetcloud.site

Hackers Weaponize Langflow Vulnerability to Launch Flodrix Botnet https://gbhackers.com/hackers-weaponize-langflow-vulnerability/ #CVE/vulnerability #CyberSecurityNews #Vulnerability #cybersecurity

GBHackers Security | #1 Globally Trusted Cyber Security News Platform · 2dHackers Weaponize Langflow Vulnerability to Launch Flodrix BotnetA critical security flaw in Langflow, is being actively exploited by cybercriminals to deploy the rapidly evolving Flodrix botnet.

Pyrzout @jos1264@social.skynetcloud.site

Zyxel Devices Under Attack as Hackers Exploit UDP Port RCE Flaw https://gbhackers.com/zyxel-devices-under-attack/ #CVE/vulnerability #CyberSecurityNews #Vulnerability #cybersecurity

GBHackers Security | #1 Globally Trusted Cyber Security News Platform · 2dZyxel Devices Under Attack as Hackers Exploit UDP Port RCE FlawA sudden and highly coordinated wave of cyberattacks has struck Zyxel firewall and VPN devices worldwide, as hackers exploit a critical remote code execution (RCE) vulnerability.

gcve.eu @gcve@social.circl.lu

Visual overview of GCVE: Global CVE Allocation System.

Overview of GCVE.eu Allocation Process

#gcve #vulnerabilitymanagement #vulnerability

Pyrzout @jos1264@social.skynetcloud.site

CVE-2025-4123 Vulnerability: “The Grafana Ghost” Zero-Day Enables Malicious Account Hijacking – Source: socprime.com https://ciso2ciso.com/cve-2025-4123-vulnerability-the-grafana-ghost-zero-day-enables-malicious-account-hijacking-source-socprime-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #TheGrafanaGhost #CVE-2025-4123 #Latestthreats #Vulnerability #socprimecom #socprime #zeroday #ZeroDay #Blog #CVE

cve-2025-4123-vulnerability:-“the-grafana-ghost”-zero-day-enables-malicious-account-hijacking-–-source:-socprime.com

CISO2CISO.COM & CYBER SECURITY GROUP · 2dCVE-2025-4123 Vulnerability: “The Grafana Ghost” Zero-Day Enables Malicious Account Hijacking – Source: socprime.comSource: socprime.com - Author: Veronika Telychko

ADMIN magazine @adminmagazine@hachyderm.io

Call for support issued by @thecvefoundation to secure funding to ensure the sustainability and independence of the CVE Program.
https://www.admin-magazine.com/News/CVE-Foundation-Issues-Call-for-Support?utm_source=mam
#CVE #vulnerabilities #exposure #CNA #Roots #CISA #MITRE #foundation

ADMIN Network & Security News

Eva Winterschön @winterschon@bsd.cafe

CVE-2025-5689

Fire up your "anyone we don't know gets root!" account SSH sessions to gain unmitigated control over Ubuntu systems running "Systemd AuthD"

Clown shoes over there, ffs how is this even a real CVE

- https://nvd.nist.gov/vuln/detail/CVE-2025-5689
- https://github.com/ubuntu/authd/security/advisories/GHSA-g8qw-mgjx-rwjr

nvd.nist.govNVD - CVE-2025-5689

#systemd #uhuhuhubuntu #ubuntu

Pyrzout @jos1264@social.skynetcloud.site

IBM Backup Services Flaw Allows Hackers to Gain Elevated Access https://gbhackers.com/ibm-backup-services-flaw/ #CVE/vulnerability #CyberSecurityNews #Vulnerability

GBHackers Security | #1 Globally Trusted Cyber Security News Platform · 3dIBM Backup Services Flaw Allows Hackers to Gain Elevated AccessA critical security vulnerability has been identified in IBM’s Backup, Recovery, and Media Services (BRMS) for IBM i, potentially exposing enterprise environments to privilege escalation attacks.

Pyrzout @jos1264@social.skynetcloud.site

KIA Ecuador Keyless Entry Systems Vulnerability Faces Major Theft Threat https://gbhackers.com/kia-ecuador-keyless-entry-systems-vulnerability/ #CVE/vulnerability #CyberSecurityNews #Vulnerability

GBHackers Security | #1 Globally Trusted Cyber Security News Platform · 3dKIA Ecuador Keyless Entry Systems Vulnerability Faces Major Theft ThreatA critical security flaw has been uncovered in the keyless entry systems (KES) widely used in KIA vehicles across Ecuador, exposing thousands of cars to a heightened risk of theft.

Alexandre Dulaunoy @adulau@infosec.exchange

CVE-2011-10007 was actually published on
2025-06-05.

Vulnerability details https://vulnerability.circl.lu/vuln/CVE-2011-10007

Details https://github.com/richardc/perl-file-find-rule/pull/4

"phasing out 2-arg open " https://www.nntp.perl.org/group/perl.perl5.porters/2025/06/msg269996.html
#cve #vulnerability

$File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename. A file handle is opened with the 2 argument form of `open()` allowing an attacker controlled filename to provide the MODE parameter to `open()`, turning the filename into a command to be executed. Example: $ mkdir /tmp/poc; echo > "/tmp/poc/|id" $ perl -MFile::Find::Rule \ -E 'File::Find::Rule->grep("foo")->in("/tmp/poc")' uid=1000(user) gid=1000(user) groups=1000(user),100(users)$

Drag & drop to upload